
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/AEB081C8EB7D11F08F2DA3C6506F56BC.roa
File: AEB081C8EB7D11F08F2DA3C6506F56BC.roa (raw, json)
Hash identifier: TKMj0SGDDWUO45H6UFrKS0aoJO0l9h24Ptk33swY28A=
Subject key identifier: CD:AB:1E:0F:9D:8D:DD:22:71:AF:66:7B:70:46:93:84:21:37:89:DB
Certificate issuer: /CN=A91EEBD4/serialNumber=8CCFB7D089DE24FE7730EF2B5C5788AE07448429
Certificate serial: 1F
Authority key identifier: 8C:CF:B7:D0:89:DE:24:FE:77:30:EF:2B:5C:57:88:AE:07:44:84:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/AEB081C8EB7D11F08F2DA3C6506F56BC.roa
Signing time: Sun 01 Mar 2026 05:46:05 +0000
ROA not before: Wed 07 Jan 2026 04:02:29 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138216
IP address blocks: 103.122.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.crl
rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEBD4, serialNumber=8CCFB7D089DE24FE7730EF2B5C5788AE07448429
Validity
Not Before: Jan 7 04:02:29 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3d29d-4105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:00:fb:35:45:d5:64:75:52:e0:1d:2b:42:
1f:9d:79:26:b5:72:1d:59:40:63:9e:d9:16:b4:67:
19:e3:88:fb:58:7d:5a:b5:11:ec:ec:1e:b8:38:e3:
a0:4d:a0:0a:d7:4c:34:78:72:06:04:1b:bb:45:50:
d6:2c:4c:6a:94:13:9a:c4:08:8e:88:64:28:57:7e:
61:b0:33:99:81:dc:f1:8b:7f:1f:42:f8:e3:97:df:
70:0a:f5:e9:bb:fd:44:33:fa:b8:ce:05:c7:5b:87:
a2:42:50:a4:ad:90:07:cd:eb:3d:8f:97:e1:1b:2a:
07:16:6e:df:4d:fc:01:57:3a:6d:1c:2d:4f:64:64:
70:75:3d:1b:4b:5a:97:f2:f7:b7:ca:1a:ec:d6:03:
ad:e5:f8:c3:73:3c:b8:da:c2:f7:17:63:f2:96:8a:
24:7d:57:f6:08:40:db:f0:32:c9:6e:4c:eb:5a:99:
e6:a8:81:d6:7a:7f:c2:95:7c:8c:d4:92:a9:4b:38:
7d:1d:13:f4:f7:fc:75:f4:e1:a6:88:b5:a4:e6:2e:
9e:18:ac:f9:5e:2f:07:3c:ac:51:20:64:b7:16:f5:
a2:58:8d:5c:a0:9b:2b:02:da:8f:27:1f:8c:12:b7:
4a:54:c8:69:51:df:1b:6f:90:c7:62:51:96:8e:ee:
9a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AB:1E:0F:9D:8D:DD:22:71:AF:66:7B:70:46:93:84:21:37:89:DB
X509v3 Authority Key Identifier:
keyid:8C:CF:B7:D0:89:DE:24:FE:77:30:EF:2B:5C:57:88:AE:07:44:84:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/jM-30IneJP53MO8rXFeIrgdEhCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM-30IneJP53MO8rXFeIrgdEhCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBD4/A79107CEEB7C11F082F51BC2506F56BC/AEB081C8EB7D11F08F2DA3C6506F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.122.102.0/24
Signature Algorithm: sha256WithRSAEncryption
03:db:18:ab:25:f1:93:82:32:22:3a:4a:4e:3c:52:18:16:67:
fe:1c:94:79:8d:58:90:56:3c:8f:2e:05:03:d0:ed:fc:fb:1d:
62:84:e6:01:43:5a:6e:2d:40:fc:3e:f5:27:7f:8f:c0:c3:42:
a5:dd:93:09:42:98:2a:e2:6d:67:b7:b0:43:a7:3b:5f:7e:31:
40:8b:77:77:33:6e:9f:78:00:6d:60:f6:30:2e:b2:05:36:45:
27:a4:85:36:df:8e:99:1f:61:61:91:73:d2:e7:d7:c3:03:19:
95:53:33:9c:9e:37:7b:fb:1d:ff:6a:8e:fd:8a:2c:ee:4b:24:
06:d9:bd:8b:b5:01:8e:5b:b4:bc:76:08:09:ff:b5:9f:b8:32:
db:42:7f:90:2c:79:d4:81:53:65:2c:e4:7a:28:bc:2e:d9:5e:
c3:d9:71:f1:36:a4:83:39:8c:1a:0f:21:92:4c:7d:31:8f:8a:
8e:b1:5c:90:f7:82:96:ca:81:fc:46:43:05:c5:8e:c2:ef:66:
8e:89:dd:49:6c:02:a0:fc:70:97:33:78:ee:ff:6a:ab:36:ce:
fb:02:24:14:a7:d2:f4:9a:7b:56:11:4c:5d:63:c1:e4:2a:e2:
52:f3:fc:b8:28:0b:87:65:13:32:d1:94:48:be:39:21:d6:22:
ad:a2:ea:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:24 2026 by rpki-client